Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-30_aabd72afdb5922dc98c17902caa54a91_cryptolocker
-
Size
47KB
-
Sample
240430-xkjb9sde9x
-
MD5
aabd72afdb5922dc98c17902caa54a91
-
SHA1
42f1ebaa4a94e0a5205a969ca22bc10e340e38f4
-
SHA256
eb8cd4f22df31e24393b2c7cf2977dfc8a46d4c2d01a936a04d8d2a81ae236ee
-
SHA512
a1968732e93b69b69525c98b053bfbac2120630860b72e0204c52097a2c30a63e0be2f344e36e7bbaab5219e54fb1a6c48796f45f5f45ff7673013134a6cce4d
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nz:vj+jsMQMOtEvwDpj5HczerLO04BI
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_aabd72afdb5922dc98c17902caa54a91_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_aabd72afdb5922dc98c17902caa54a91_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-30_aabd72afdb5922dc98c17902caa54a91_cryptolocker
-
Size
47KB
-
MD5
aabd72afdb5922dc98c17902caa54a91
-
SHA1
42f1ebaa4a94e0a5205a969ca22bc10e340e38f4
-
SHA256
eb8cd4f22df31e24393b2c7cf2977dfc8a46d4c2d01a936a04d8d2a81ae236ee
-
SHA512
a1968732e93b69b69525c98b053bfbac2120630860b72e0204c52097a2c30a63e0be2f344e36e7bbaab5219e54fb1a6c48796f45f5f45ff7673013134a6cce4d
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nz:vj+jsMQMOtEvwDpj5HczerLO04BI
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-